<h2>Must know</h2>
<ul>
<li><strong>Trivy supply chain attack compromises GitHub Actions</strong>: Hackers compromised Aqua Security’s Trivy vulnerability scanner by injecting malicious code into nearly all versions via stolen credentials. The attack specifically targeted the trivy-action and trivy-setup GitHub Actions to exfiltrate cloud credentials, SSH keys, and Kubernetes tokens from CI/CD pipelines. Maintainers advise immediate rotation of all pipeline secrets if you have run any version other than 0.35.0 recently. <a href="https://app.daily.dev/posts/2d8XVA28P" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Germany mandates OpenDocument formats for public sector</strong>: The German government’s new Deutschland-Stack framework officially mandates ODF and PDF/UA for all public administrations, explicitly banning proprietary formats like .doc and .xls by 2028. This move aims to eliminate vendor lock-in and establish open standards as fundamental democratic infrastructure. The mandate aligns with broader European digital sovereignty efforts and prioritizes open-source solutions over proprietary stacks. <a href="https://app.daily.dev/posts/ffG1g9Lse" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sashiko brings AI code review to the Linux kernel</strong>: A Google engineer introduced Sashiko, a Rust-based AI tool designed to analyze Linux kernel patches and provide feedback to maintainers. In initial testing, the tool identified 53% of bugs that had been previously missed by human reviewers. Now hosted under the Linux Foundation, Sashiko is positioned strictly as a maintainer aid rather than an automated code submission tool to ensure community acceptance. <a href="https://app.daily.dev/posts/j5mdnOwUC" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Canonical releases MicroCloud Cluster Manager beta for edge orchestration</strong>: A new Go-based tool for managing lightweight cloud clusters across data centers and edge environments using Juju and Traefik. <a href="https://app.daily.dev/posts/eNJ4S0Xa7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.5 adds Linux Syscall User Dispatch support</strong>: The update improves performance for Windows compatibility layers by redirecting non-native system calls to user-space, fixing long-standing game crashes. <a href="https://app.daily.dev/posts/1L0pKGR6J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Neuron DRA driver enables native Trainium scheduling in EKS</strong>: The new driver allows Kubernetes-native, hardware-aware scheduling for ML workloads without requiring custom scheduler extensions. <a href="https://app.daily.dev/posts/9LEsjcMcn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SingleStore 9.1 introduces F16 vector type for RAG optimization</strong>: The new data type cuts embedding storage by 50% and speeds up kNN queries by 38% with negligible impact on recall. <a href="https://app.daily.dev/posts/xRqtno45x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>VoidZero open sources Vite plus under MIT license</strong>: The full local development lifecycle tool, including the Rolldown-based bundler and task runner, is now entirely open source. <a href="https://app.daily.dev/posts/dbyxVvRUE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Crossplane 2.0 expands declarative control for AI infrastructure</strong>: The update enables composite APIs to provision infrastructure and networking, providing a consistent API surface for autonomous agents. <a href="https://app.daily.dev/posts/8Au3AFSc9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome Canary tests text scaling for mobile accessibility</strong>: A new meta tag allows web pages to respect system-level text size settings on iOS and Android without breaking page layouts. <a href="https://app.daily.dev/posts/w8NeiWWGr" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>NVIDIA DLSS 5 is rewriting graphics and reality</strong>: NVIDIA is claiming DLSS 5 is a ‘breakthrough,’ but developers are already complaining that it completely ignores artistic intent by hallucinating lighting and contrast that wasn’t in the original scene. Jensen Huang’s response to the backlash was essentially to tell artists they’re wrong, proving that ‘AI-powered’ is now just a synonym for ‘we’ll decide what your game looks like.’ It’s a bold move to market a feature that makes your high-end GPU output look like a washed-out fever dream. <a href="https://app.daily.dev/feed-by-ids?id=BsIJ2t6dP&amp;id=bugYUlRMu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The automated AI researcher is coming for your job by 2028</strong>: OpenAI’s latest hype cycle promises a fully autonomous ‘AI researcher’ within three years, despite current frontier models scoring a literal 0% on reasoning benchmarks for esoteric languages. They’re calling it ‘Codex’ again, hoping we’ve forgotten that current agents still struggle with basic task reversibility and compound probability failures. It’s a classic ‘trust us, the AGI is in the next training run’ pitch while the actual tech still can’t handle a Whitespace file. <a href="https://app.daily.dev/feed-by-ids?id=5rUZDVSxD&amp;id=NwGOQcAls" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Delve is the YC backed way to fake your SOC 2</strong>: An investigation revealed that Delve, a GRC ‘automation’ startup, has been allegedly fabricating compliance evidence and using offshore ‘certification mills’ to rubber-stamp identical reports. They’ve managed to turn the already-theatrical world of compliance into a full-blown fraud machine, leaving clients with massive HIPAA and GDPR liability. It turns out ‘AI-powered compliance’ was just a script generating 494 nearly identical reports for unsuspecting NASDAQ companies. <a href="https://app.daily.dev/posts/zmPU272WX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
